Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PUSwxdNmLnaxE7N3NLNSbrBh0uw.roa
File: PUSwxdNmLnaxE7N3NLNSbrBh0uw.roa (raw, json)
Hash identifier: J/aqVI9EpH6gZVmeFnaCXwlj5jbKAbSnbNRH5tdp+RU=
Subject key identifier: 3D:44:B0:C5:D3:66:2E:76:B1:13:B3:77:34:B3:52:6E:B0:61:D2:EC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AB399D31DD99BD9642512F9CE608D0F62
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PUSwxdNmLnaxE7N3NLNSbrBh0uw.roa
Signing time: Wed 20 Sep 2023 17:18:37 +0000
ROA not before: Wed 20 Sep 2023 17:18:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 12:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:99:d3:1d:d9:9b:d9:64:25:12:f9:ce:60:8d:0f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 20 17:18:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d44b0c5d3662e76b113b37734b3526eb061d2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:e7:ff:00:7d:e4:45:38:56:ca:62:ee:3d:
97:7a:da:66:c3:6d:c5:62:c2:20:1d:2d:1b:d4:1a:
2c:df:33:9e:19:0e:da:c5:dd:10:09:3c:e1:13:10:
6b:70:67:3a:57:66:11:b4:f1:07:59:07:af:5c:ec:
cd:69:91:4e:bf:63:10:52:9c:75:81:00:96:d7:67:
9f:b4:d3:6f:b1:d3:a8:d1:65:48:02:f8:93:2f:de:
ad:e5:db:9b:ce:a9:1b:a8:c9:f9:dc:82:08:f7:88:
1f:a0:bd:c2:02:9c:48:3b:e2:80:e7:6e:4a:66:1b:
cf:29:58:b2:39:5d:96:6d:fd:18:24:56:a1:0c:67:
4a:54:c4:dc:90:ff:f5:67:63:25:d3:77:61:c1:64:
9d:df:b8:c1:dc:c5:0a:07:ea:57:c0:c3:24:b7:58:
1e:bb:20:47:3b:81:bf:7e:1f:17:34:2b:54:ca:87:
09:34:6c:c0:89:10:82:9e:82:b4:07:f7:26:97:ab:
ca:5e:8f:99:6a:1e:fe:da:ee:42:5b:a2:65:36:4c:
3e:66:48:b9:61:13:28:68:d9:6d:1d:79:f7:b0:d3:
89:2d:08:bb:68:6b:8e:f0:c0:de:39:0d:d7:f0:e3:
72:68:b5:26:44:1b:f2:c8:5f:5d:15:13:a7:b0:3f:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:B0:C5:D3:66:2E:76:B1:13:B3:77:34:B3:52:6E:B0:61:D2:EC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PUSwxdNmLnaxE7N3NLNSbrBh0uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0/24
86.107.51.0/24
86.107.168.0/24
89.34.219.0/24
89.35.119.0/24
89.35.130.0/23
94.177.150.0/24
188.214.107.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:8c:41:60:99:10:8b:c6:87:43:05:b5:4d:b0:c0:eb:1e:
72:e3:8e:ff:72:ca:19:2c:e6:cc:f0:df:55:0c:50:5d:7e:f1:
20:58:61:b4:72:d3:d2:78:f7:f7:20:a8:9c:d4:7c:9f:6c:91:
77:f3:89:ee:54:56:5f:d3:7e:bf:76:94:9c:56:07:37:b5:77:
76:04:47:34:0d:fc:26:c6:e4:51:88:34:03:de:e2:29:a5:fb:
80:c5:95:26:1f:2e:bd:32:08:76:14:74:cc:3d:f1:ad:5f:b4:
b0:2c:ef:bd:35:1c:43:0b:49:58:9c:c6:cd:63:53:fd:9d:92:
0a:93:cd:47:d0:29:c3:b9:91:21:f0:31:dd:0d:25:ea:54:66:
22:da:29:a6:e7:76:3c:bb:f3:8d:f0:2d:16:da:66:d4:c1:6f:
08:1e:25:84:44:4b:98:ee:2b:bb:f5:3e:12:e1:b5:97:c2:73:
db:96:46:6e:19:27:ae:6f:b2:fe:b7:ba:2e:57:ac:dc:3c:d8:
42:7e:09:fd:2c:42:b5:32:87:ab:bc:d3:2f:b0:3a:0e:4f:ed:
a4:2d:e0:81:76:de:16:88:ba:d3:7d:7e:51:9e:15:2a:b8:dd:
89:91:19:fe:2a:4f:92:6d:07:c4:a9:32:9b:cc:55:03:3f:aa:
3a:7a:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org